Data Privacy Declaration

We take the protection of your personal data very seriously. Our data privacy declaration for the collection and processing of your data when you visit the DIMDI website is detailed below.

  1. Information on the collection of personal data when you use our website
  2. Your rights
  3. Visiting our website
  4. Objection or withdrawal of consent regarding the processing of your data
  5. Functions and offers on our website
    1. Newsletter
    2. Orders
    3. DRKS (German Clinical Trials Register): Registration of clinical trials
    4. DRKS (German Clinical Trials Register): User accounts for the registration of clinical trials
  6. Changes to this data privacy declaration
  7. Source for the template for this data privacy declaration

 

1. Information on the collection of personal data when you use our website

Personal data is any information, that can be specifically attributed to you, e.g. name, address, email addresses, user behaviour.
The responsible person in accordance with Art. 4 para 7 of the EU General Data Processing Regulation (GDPR) is DIMDI, Waisenhausgasse 36-38a, 50676 Cologne, represented by the director, Dr. Dietrich Kaiser. You can contact our data protection officer at dsb@dimdi.de or via our postal address by addressing your communication to "The Data Protection Officer".
If you contact us by email or using a contact form, we will store the information you provide (your email address, name and telephone number, if applicable) to process your request. We will delete such data after a specific period of time when storage is no longer required or will limit the processing in the event of legal storage obligations.
We will notify you if we commission service providers to carry out specific processes in our offer. Details and the specific storage period criteria are stipulated in point "Functions and offers on our website".

 

2. Your rights

You have the following rights with respect to your personal data:

You also have the right to appeal to a data protection supervisory authority regarding how we process your personal information.

 

3. Visiting our website

In the case of purely informative use of our website, i.e. if you do not register or otherwise provide us with information, we will only collect the data transmitted by your browser to our server. If you wish to view our website, we collect the following data that is technically necessary for us to display our website and to ensure stability and security (the legal basis is Art. 6 para 1 page 1 letter f GDPR):
– Browser type and version
– Operating system used
– Website from which you arrived on our site (Referrer URL)
– Pages and files accessed on our site
– Where appropriate, the website you visited after our site (by clicking an external link on our website)
– Date and time of access
– IP address, anonymised in truncated form
Log data is stored for IT security purposes for a period of up to 7 days and then deleted. Log data required for evidence purposes will be archived until the incident is finally resolved.

 

4. Objection or withdrawal of consent regarding the processing of your data

You can withdraw your consent to the processing of your data at any time. Such revocation will affect the legitimacy of the processing of your personal data after you have declared such revocation.
You can object to processing insofar as we base the processing of your personal data on a balance of interests. This applies in particular if processing is not required to fulfil a contract with you, as stipulated in the following description of the functions and offers on our website. In the event of an objection, please explain why we should not process your personal information as we have done. We will then review the situation and will either cease processing, modify the data processing or set out our compelling legitimate reasons for continuing to process your data.

 

5. Functions and offers on our website

We offer further services in addition to the purely informational use of our website. To do this, we typically require additional personal information that is subject to the aforementioned principles of data processing.
We use external service providers to process your data, and these third parties are bound by our instructions and are subject to regular checks.
We do not transfer your personal data to third parties for commercial purposes, and only in a few cases do we forward your personal data to such third parties. You will receive more information when entering your personal data, and below in the description of the offer.


5.1. Newsletter


When you sign up for our newsletter, we implement the double-opt-in procedure: After your registration, we will send you an email to the email address you specified, in which we ask you to confirm your registration. Only after this confirmation will we store your email address to send the newsletter to you. The legal basis is Art. 6 para 1 page 1 letter a GDPR.
You can revoke your consent to the receipt of our newsletter at any time and unsubscribe from the newsletter. You can use the link provided in each newsletter email or use the form to sign up.


5.2 Orders


Free materials (e.g. flyers):
We will need your postal address details if you wish to order free materials via our website, and we only use such personal data to process your order. The legal basis is Art. 6 para 1 page 1 letter a GDPR. Your data will not be forwarded to third parties.
The personal data you transmit will be stored (and can be subsequently withdrawn) when you order and automatically deleted after a period of up to 3 months.

5.3 DRKS (German Clinical Trials Register): Registration of clinical trials


Personal contact information stored in the address fields for the registration of clinical trials in the DRC is required for WHO-compliant registration. We publish this contact information on the websites of the DRKS, the primary registry for Germany recognised by the WHO. The data is used for correspondence e.g. for medical and scientific representatives and for patients. The legal basis is Art. 6 para 1 page 1 letter f GDPR.
As a WHO primary registry, we are required to share all data, including personal information, with the WHO International Clinical Trials Registry Platform.
Personal contact data on the websites of the DRKS are deleted when they cease to be required for the purpose for which such data was stored. You can object to the processing of your contact data by email at any time via email to kontakt-drks@dimdi.de.

5.4 DRKS (German Clinical Trials Register): User accounts for the registration of clinical trials


You must enter personal data, a password of your choice and username you select to register clinical trials in the DRKS. We implement the double-opt-in procedure for registration, whereby your registration is only complete once you have confirmed your registration by clicking the links in the confirmation email sent to you for this purpose.
Your personal data serves to enable us to correspond with you. This data will not be disclosed to third parties nor will it be visible to third parties.
We save the data provided by you for the period of your use of the user account, insofar as you do not delete such data or your access prematurely. The legal basis is Art. 6 para 1 page 1 letter a GDPR.

6. Changes to this data privacy declaration


DIMDI reserves the right to occasionally amend this data privacy declaration to adapt to current circumstances. We therefore recommend that you consult our data privacy declaration regularly.

7. Source for the template for this data privacy declaration


Extracts from the: Formularhandbuch Datenschutzrecht (Form Handbook Data Protection Law), Koreng/Lachenmann/Editor, publisher C.H. Beck, 2nd edition 2018.

Last Modified: 06-07-2018